Staff Application Security Engineer DDoS

9 hours ago

Toronto, Ontario, Canada Faire Wholesale Inc. Full-time

Protect Faire's marketplace from application-layer DDoS and scraping through edge controls, coding, and incident response. This hybrid role shapes security strategy.

The Staff Security Engineer, Bot and Traffic Defence, will own a new technical domain within Faire Engineering. You will develop controls that withstand changing adversaries and protect legitimate buyers. Success requires collaboration across Security, Platform, service teams, and Anti-Abuse.

Key Responsibilities:

  • Develop end-to-end application-layer DDoS defence strategy
  • Tune edge security controls against evolving adversaries
  • Measure detection precision, recall, and false-positive tolerance
  • Create runbooks, paging paths, and attack observability
  • Enable teams with secure defaults and playbooks

Requirements:

  • Hands-on Cloudflare, Akamai, Fastly, or AWS experience
  • Operational experience defending consumer traffic against scraping
  • Practical knowledge of bot detection signal trade-offs
  • Experience owning live traffic attack response
  • Clear communication with engineers and executives

Use application security, quantitative detection, and operational judgment to strengthen Faire's defences against automated traffic attacks.